Session auth (5/16)

Session auth